Mailing-List: contact dev-help@hc.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "HttpComponents Project" <dev@hc.apache.org>
Date: Fri, 16 Nov 2012 21:35:12 +0000 (UTC)
From: =?utf-8?Q?C=C3=A9dric_Chantepie_=28JIRA=29?= <jira@apache.org>
To: dev@hc.apache.org
Message-ID: <750751222.125761.1353101712867.JavaMail.jiratomcat@arcas>
Subject: [jira] [Created] (HTTPCLIENT-1262) Weird SSL issue (PKIX path
 building failed) [www.popcornopolis.com]
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

C=C3=A9dric Chantepie created HTTPCLIENT-1262:
--------------------------------------------

             Summary: Weird SSL issue (PKIX path building failed) [www.popc=
ornopolis.com]
                 Key: HTTPCLIENT-1262
                 URL: https://issues.apache.org/jira/browse/HTTPCLIENT-1262
             Project: HttpComponents HttpClient
          Issue Type: Bug
          Components: HttpClient
    Affects Versions: 3.1 Final
         Environment: JDK 1.6, Mac OS X 10.{6,8}, Ubuntu
            Reporter: C=C3=A9dric Chantepie
            Priority: Blocker


Try to request some HTTPS websites, we get 'PKIX path building failed' erro=
r.

Seems it's about intermediate/chain certificate.

Exception in thread "main" javax.net.ssl.SSLHandshakeException: sun.securit=
y.validator.ValidatorException: PKIX path building failed: sun.security.pro=
vider.certpath.SunCertPathBuilderException: unable to find valid certificat=
ion path to requested target
at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:174)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1764=
)
at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:241)
at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:235)
at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHa=
ndshaker.java:1206)
at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientHands=
haker.java:136)
at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:593)
at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:5=
29)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java=
:958)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSo=
cketImpl.java:1203)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.jav=
a:654)
at com.sun.net.ssl.internal.ssl.AppOutputStream.write(AppOutputStream.java:=
100)
at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:65)
at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:123)
at org.jirafe.shaded.httpclient.HttpConnection.flushRequestOutputStream(Htt=
pConnection.java:828)
at org.jirafe.shaded.httpclient.HttpMethodBase.writeRequest(HttpMethodBase.=
java:2116)
at org.jirafe.shaded.httpclient.HttpMethodBase.execute(HttpMethodBase.java:=
1096)
at org.jirafe.shaded.httpclient.HttpMethodDirector.executeWithRetry(HttpMet=
hodDirector.java:398)
at org.jirafe.shaded.httpclient.HttpMethodDirector.executeMethod(HttpMethod=
Director.java:171)
at org.jirafe.shaded.httpclient.HttpClient.executeMethod(HttpClient.java:39=
7)
at org.jirafe.shaded.httpclient.HttpClient.executeMethod(HttpClient.java:32=
3)
at Test.main(Test.java:22)
Caused by: sun.security.validator.ValidatorException: PKIX path building fa=
iled: sun.security.provider.certpath.SunCertPathBuilderException: unable to=
 find valid certification path to requested target
at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:323)
at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:2=
17)
at sun.security.validator.Validator.validate(Validator.java:218)
at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.validate(X509TrustMana=
gerImpl.java:126)
at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X50=
9TrustManagerImpl.java:209)
at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X50=
9TrustManagerImpl.java:249)
at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHa=
ndshaker.java:1185)
... 17 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unab=
le to find valid certification path to requested target
at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPat=
hBuilder.java:174)
at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:238)
at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:318)
... 23 more


--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrato=
rs
For more information on JIRA, see: http://www.atlassian.com/software/jira

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org